Skip links
RedRays
Arpine Maghakyan

Arpine Maghakyan

Security Researcher of RedRays.

Command injection vulnerability in SAP Netweaver IdM, SAP security note 1831985

Description

The Identity Management User Interface contained code that permitted an attacker to inject code to control the behavior of the system.

Available fix and Supported packages

  • IDMIC | 7.00 | 7.00
  • IDMIC | 7.10 | 7.10
  • IDMIC | 7.20 | 7.20
  • IDMIC | 7.21 | 7.21
  • NW IDM 7.2 UIS FOR NW 7.00 | SP007 | 000002
  • NW IDM 7.2 UIS FOR NW 7.10 | SP007 | 000002
  • NW IDM IC 7.10 UIS FOR NW 7.00 | SP007 | 000003
  • NW IDM IC 7.10 UIS FOR NW 7.00 | SP008 | 000000
  • NW IDM IC 7.10 UIS FOR NW 7.10 | SP007 | 000003
  • NW IDM IC 7.10 UIS FOR NW 7.10 | SP008 | 000000

Affected component

    BC-IAM-IDM
    Identity Management

CVSS

Score: 0

Exploit

Exploit is not available.
For detailed information please contact the mail [email protected].

URL

https://launchpad.support.sap.com/#/notes/1831985

TAGS

#Run
#Command
#Injection
#Identity-Management-User-Interface
#Identity-Management
#IdM
#ID-Mgmt

More to explorer